72a495cb1caa461f701aae4b291afd50_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72a495cb1caa461f701aae4b291afd50_NeikiAnalytics
Size

1.5MB
MD5

72a495cb1caa461f701aae4b291afd50
SHA1

11126cc1956374152c28dd4d4dc3aeb4088db04a
SHA256

caf77246b9028e15ed7af08340dd78d380bba36469debe4ec4098662d44e48ef
SHA512

d00c083b1773148caf66480abd4a8c9aaf886c04968423206f9883ca98f9ed3e3f67b73492842688f67a98fc7ffbd286d580bc9af389dfb34d6476228d004e39
SSDEEP

12288:1Xc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:1sqjnhMgeiCl7G0nehbGZpbD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72a495cb1caa461f701aae4b291afd50_NeikiAnalytics

Files

72a495cb1caa461f701aae4b291afd50_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

27e7eaa5b46da19b5f74481374a87b1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Office\Source\groove\bin\ReleaseSym\GrooveStdURLLauncher.pdb

Imports

shell32

ShellExecuteExA

ole32

OleInitialize
OleUninitialize

msvcr80

_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
__set_app_type
_crt_debugger_hook
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
memset
_encode_pointer

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
QueryPerformanceCounter

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE